Using RACF to control access to DB2 Objects

Cristian Molaro

When asked, IBM recommends / supports (as far as I found) moving
the access
control of DB2 objects to RACF.
I would like to have your opinion / comments / experiences about
this...

Are you using RACF to control access to DB2 objects in your
shop?
Did you found impacts on performance?
Was the migration smooth?
Please don't hesitate to share any comment, as I hope they will
help me to
have a picture of what to expect when moving security control to
RACF

We are running DB2 7.1 for zOS (v 1.4) and the machine is a z990.
We serve
both local and distributed applications.

PK Ganapathy

All the shops that I have worked so far have had the 2 levels
of
protections for DB2 data - one using the regular DB2 security
(GRANT/REVOKE), and the other using RACF where the first or 2nd
node of the
dataset HLQ was protected.

>Hello list,
>
>When asked, IBM recommends / supports (as far as I found)
moving the access
>control of DB2 objects to RACF.
>I would like to have your opinion / comments / experiences
about this...
>
>Are you using RACF to control access to DB2 objects in your
shop?
>Did you found impacts on performance?
>Was the migration smooth?
>Please don't hesitate to share any comment, as I hope they will
help me to
>have a picture of what to expect when moving security control
to RACF
>
>We are running DB2 7.1 for zOS (v 1.4) and the machine is a
z990. We serve
>both local and distributed applications.
>
>Thanks in advance for your help and for sharing your
opinion!
>
>Cristian Molaro
>EB, Belgium
>
>---------------------------------------------------------------------------
------
>Welcome to the IDUG DB2-L list. To unsubscribe, go to the
archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html.
From that page
select "Join or Leave the list". The IDUG DB2-L FAQ is athttp://www.idugdb2-l.org. The IDUG
List Admins can be reached at DB2-L-
[login to unmask email] Find out the latest on IDUG conferences
athttp://conferences.idug.org/index.cfm